 Link LoggerPremium,MVM
join:2001-03-29
Calgary, AB
kudos:3
 ·Shaw
| Turning off Messenger Service Perhaps the most important thing about Messenger Service is if your getting Spam Messages then they could be the least of your problems as it tells me that your system is connected directly to the Internet unprotected by a firewall (good thing my hat is white and not black). So any unpatched vulnerability or zero day exploit or mass worm could possibly victimize your system (all things that firewalls can protect you from). In reality Messenger Spam is fairly benign in that it is text only, no links, scripts, attachments etc, and really just a very high annoyance factor but in themselves a low danger factor. One thing it can do however is let the sender (depending on how they are sending them to you) know that your system is possibly open as it can communicate back that the message was received (and hence connected directly to the internet without firewall protection, ie a victim in waiting).
When we use PortPeeker to send out Infection Notices via Messenger Services we see that high percentage of infected systems also accept messages, coincidence, I think not. Being able to accept Messenger Services is a good marker for generally poorly protected systems overall, and turning it off Messenger Service isn't going to help your overall security much. You should rethink your security needs and plan as disabling the Messenger Service is like closing your eyes and wishing the scary monsters will go away.
Blake
--
»www.SonicLogger.com - Logging Software for SonicWall and 3Comhttp://www.LinkLogger.com - Logging Software for Linksys, Netgear and Zyxel |
|
 MavenPremium
join:2002-03-12
Canada | Yes, he speaks the truth. Ignoring the danger is foolish. |
|
 dvd536as Mr. Pink as they comePremium
join:2001-04-27
Phoenix, AZ
kudos:4 | reply to Link Logger
if you get popup spam and havent ran windows update lately chances are VERY GOOD that you have been infected by one of the many RPC worms. update your AV sigs (get a firewall if you dont have one). and most importantly goto windowsupdate and patch your system! (you can get a free firewall at www.zonelabs.com)
--
You can never be too rich, too thin or have too much Bandwidth |
|
 mboyPremium
join:2001-04-13
Little Falls, NJ | reply to Link Logger
Hehehe, my users at work luv it when I send them pop ups about network,email trouble,when their updates are complete, etc. Of course I dont let it in thru my router unless it is VPN'd) and I block it at my gateway firewall as well  |
|
|
|
